I see they rejected the checkpoint someone did a pull request on earlier. The "current chain" the exchanges are relying on are, I assume, the one full of the blocks from the attacker...